I could not find any way to filter out these candidates using acl on freeswitch side. I ended up using sessionDescriptionHandlerFactoryOptions Modifiers on sip js side to remove those candidates before sending sdp to freeswitch

On Wed, Apr 29, 2020 at 11:39 AM Babak Yakhchali <babak.freeswitch@gmail.com> wrote:
Hi
I'm trying to use sipjs with freeswitch but the problem is freeswitch is accepting candidates like this:
a=candidate:2131708102 1 udp 2113937151 ad7f0d0b-7245-4c33-84af-fda3f2921d18.local 54385 typ host generation 0 network-cost 999
these are generated by mdns from browser and cause errors like
 AUDIO RTP REPORTS ERROR: [Remote Address Error!] 
and then
INCOMPATIBLE_DESTINATION

I tried wan_v4.auto as "apply-candidate-acl" but it is accepting those candidate too
is there any builtin acl that I can use to make fs accept only public ipv4 addresses?
thanks